CVE-2017-14152

A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c and opjj2kwritesot in...

CVE-2017-14151

CVE-2017-14151 affects OpenJPEG 2.2.0; an off-by-one error in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c can cause an out-of-bounds write, leading to remote denial of service (heap-based overflow) and possibly remote code execution via affected paths (opj_mqc_flush, opj_t1_encode_c...

CVE-2017-14152

OpenJPEG 2.2.0 contains CVE-2017-14152: a mishandled zero case in opj_j2k_set_cinema_parameters (lib/openjp2/j2k.c) can cause an out-of-bounds write, potentially leading to remote denial of service or remote code execution. Affected functions include opj_write_bytes_LE (lib/openjp2/cio.c) and opj...

CVE-2017-14152

A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c and opjj2kwritesot in...

CVE-2017-14151

An off-by-one error was discovered in opjtcdcodeblockencallocatedata in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjmqcflush in lib/openjp2/mqc.c and opjt1encodecblk in...

CVE-2017-14152

A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c and opjj2kwritesot in...

PT-2017-13282

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A heap-based buffer overflow issue was found due to an off-by-one error in the opj tcd code block enc allocate data function, potentially leading to remote denial of service or possibly remote code execution...

CVE-2017-14152: Out-of-bounds Write

A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c and opjj2kwritesot in...

CVE-2017-14151: Improper Restriction of Operations within the Bounds of a Memory Buffer

An off-by-one error was discovered in opjtcdcodeblockencallocatedata in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjmqcflush in lib/openjp2/mqc.c and opjt1encodecblk in...

PT-2017-13283

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description A mishandled zero case was discovered in opj j2k set cinema parameters in lib/openjp2/j2k.c, causing an out-of-bounds write. This may lead to remote denial of service, specifically a heap-based buffer overflo...

[SECURITY] Fedora 26 Update: openjpeg2-2.2.0-2.fc26

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

OpenJPEG - mqc.c Heap-Based Buffer Overflow Exploit

Exploit for linux platform in category dos / poc DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB...

CVE-2017-14039

A heap-based buffer overflow was discovered in the opjt2encodepacket function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact...

OpenJPEG - mqc.c Heap Buffer Overflow

OpenJPEG - mqc.c Heap Buffer Overflow DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. TESTED VERSION...

OpenJPEG - 'mqc.c' Heap Buffer Overflow

DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. TESTED VERSION Master version of OpenJPEG 805972f,...

CVE-2016-10506

Division-by-zero vulnerabilities in the functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted j2k files...

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10505

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c, coloresycctorgb function in color.c, and sycc422torgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted...

CVE-2017-14040

An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact...